ISO/IEC 29110-3-2:2018 软件工程 很小实体的生命周期概况 第3-2部分：合格认证方案

标准编号：ISO/IEC 29110-3-2:2018

中文名称：软件工程 很小实体的生命周期概况 第3-2部分：合格认证方案

英文名称：Systems and software engineering — Lifecycle profiles for Very Small Entities (VSEs) — Part 3-2: Conformity certification scheme

发布日期：2018-04

标准范围

本文件:-定义适用于认证符合ISO/IEC 29110中给出的要求的系统工程、软件工程和服务交付过程的实施的规则？4-m，型材规格；和-向客户提供有关供应商认证方式的必要信息和信心。系统和软件工程过程实施的认证（在本文档中称为“认证”）是一项第三方合格评定活动（参见ISO/IEC 17000:2004,5.5）。因此，执行该活动的机构是第三方合格评定机构（在本文件中称为“认证机构”）。注:本文件主要用作认证机构的认可或同行评估的标准文件，这些机构寻求被认可为有能力证明非常小的实体（VSE）符合ISO/IEC 29110？4-m，型材规格。参与此类认证机构合格评定的任何其他方也可能发现其某些要求是有用的。系统和软件工程过程认证并不证明VSE提供的系统和/或软件产品的适用性。需要注意的是，根据ISO/IEC 29110对系统和软件工程过程的实施进行认证？4-m，Profile Specifications，是过程认证，而不是管理体系认证，也不是产品认证。对非常小的实体（VSE）的系统和软件工程过程（SEP）的实施进行认证是保证VSE已经为系统和/或软件的开发或维护实施了系统和软件工程过程的一种手段。实施SEP的要求可以来自许多来源，制定本国际标准是为了帮助认证符合ISO/IEC 29110要求的SEP？4-m，型材规格。本文档的内容也可用于支持基于其他指定SEP要求集的SEP认证。本文件旨在供对VSE进行SEP审核和认证的机构使用。它给出了此类认证机构在VSE的SEP领域进行审核和认证的一般要求。这种机构被称为认证机构。这一措辞无意成为从事本文件范围内活动的具有其他名称的机构使用本文件的障碍。事实上，本文件旨在供任何参与VSE SEP评估的人使用。认证活动包括对VSE SEP的审核。VSE的SEP符合设定适用SEP的特定生命周期概况标准（例如ISO/IEC 29110？4-1或ISO/IEC 29110？4-3）或其他指定要求的证明形式通常是认证文件或证书。该认证不在ISO/IEC 29169对过程质量特性和组织成熟度的评估范围内，不涵盖过程评估的结果。ISO/IEC 29110-3-3描述了这样的方案。获得认证的VSE需要开发自己的流程（包括ISO/IEC 29110？4-m SEP）、其他指定的SEP要求、其他流程，并由VSE决定如何安排这些流程的各个组成部分。因此，根据本文件运作的认证机构应考虑其客户在实施SEP方面的文化和实践，包括在更广泛的组织内（如果适用）。

This document:
- defines the rules applicable for certification of the implementation of systems engineering, software engineering and service delivery processes complying with the requirements given in ISO/IEC 29110？4-m, Profile specifications; and
- provides the necessary information and confidence to customers about the way certification of their suppliers has been granted.
Certification of the implementation of systems and software engineering processes (named "certification" in this document) is a third-party conformity assessment activity (see ISO/IEC 17000:2004, 5.5). Bodies performing this activity are therefore third-party conformity assessment bodies (named "certification body/bodies" in this document).
NOTE This document is primarily intended to be used as a criteria document for the accreditation or peer assessment of certification bodies which seek to be recognized as being competent to certify that a Very Small Entity (VSE) complies with ISO/IEC 29110？4-m, Profile Specifications. Some of its requirements could also be found useful by any other parties involved in the conformity assessment of such certification bodies.
Systems and software engineering processes certification does not attest the fitness of the systems and or software products offered by a VSE.
It is important to note that certification of the implementation of systems and software engineering processes according to ISO/IEC 29110？4-m, Profile Specifications, is a process certification and not a management systems certification neither a product certification.
Certification of the implementation of systems and software engineering processes (SEP) of a very small entity (VSE) is one means of providing assurance that the VSE has implemented systems and software engineering processes to the development or maintenance of systems and or software.
Requirements for the implementation of SEP can originate from a number of sources, and this International Standard has been developed to assist in the certification of SEP that fulfil the requirements of ISO/IEC 29110？4-m, Profile Specifications. The contents of this document can also be used to support certification of SEP that are based on other sets of specified SEP requirements.
This document is intended for use by bodies that carry out audit and certification of SEP for VSEs. It gives generic requirements for such certification bodies performing audit and certification in the field of SEP for VSEs. Such bodies are referred to as certification bodies. This wording is not intended to be an obstacle to the use of this document by bodies with other designations that undertake activities covered by the scope of this document. Indeed, this document is intended to be usable by anyone involved in the assessment of SEP for VSEs.
Certification activities involve the audit of a VSE's SEP. The form of attestation of conformity of a VSE's SEP to a specific lifecycle profile standard setting the applicable SEP (for example ISO/IEC 29110？4-1 or ISO/IEC 29110？4-3) or other specified requirements are normally a certification document or a certificate.
This certification is outside the scope of ISO/IEC 29169 to the assessment to process quality characteristics and organizational maturity, and does not cover the results of process assessment. ISO/IEC 29110-3-3 describes such a scheme.
It is for the VSE being certified to develop its own processes (including ISO/IEC 29110？4-m SEP), other sets of specified SEP requirements, other processes and it is for the VSE to decide how the various components of these will be arranged. It is therefore for certification bodies that operate in accordance with this document to take into account the culture and practices of their clients with respect to the implementation of SEP, including, if applicable, within the wider organization.

标准预览图